4017ad6969467817f8776f31e3c84606 | Triage

Sharing

General

Target

4017ad6969467817f8776f31e3c84606
Size

56KB
MD5

4017ad6969467817f8776f31e3c84606
SHA1

c403562965227d3be9b16cdf84c8bd785fc3e640
SHA256

5e8fd02b5e0bdf1d3a3c99eec4415dcbe1c8ad19b32ec2fca079aaa20af82ddc
SHA512

7b4f1ae84e4c0b55d4fce07793b31cf5b35c136b39c83113569548a741c381c7d06fd499823048519f93de00eebf595ac256e0315491c291de56763487bad94b
SSDEEP

768:uuV5beq6CeycLUCQvMjWzRHN7iYRXMWSTZ9vIburCUTbxk6whnUGnAoCdQ9vBCvK:u5mCiR8Y6ZtI8CK9jMnNAoWFv+mHPqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4017ad6969467817f8776f31e3c84606

Files

4017ad6969467817f8776f31e3c84606
.exe windows:4 windows x86 arch:x86

dd92223661ef7527e45734a03e15c297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetProcessIoCounters
GetStartupInfoA
HeapDestroy
ReadConsoleInputExW
CreateFileA
SetPriorityClass
SetComputerNameW
GetConsoleAliasA
MoveFileA
BuildCommDCBAndTimeoutsA
RtlFillMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE